How does Malware Antivirus get onto unsuspecting user's computer?

Question

I am a computer programmer hoping to eventually specialize in computer security. Intrigued by a recent infection on a family members computer, I decided to research how Malware Antivirus and Anti-spyware software gets deployed on a user's computer. I have not found anything yet on it, I have not managed to contract it myself in my 10 years surfing the net... Which leads me to believe that there are methods that trick unexperienced or unknowledgeable users... but how do the minds behind these malicious softwares know what to target?

Any answers, truth or speculation, are welcome!!

Answer 1

First off... Malware AV and Anti-Spyware would be programs to STOP you from getting Malware or Spyware.

So... your looking at how Malware or Spyware gets on computer correct?

Basically, the OS that you decide to use (whether MS, MAC or LINUX) has vulnerabilities or exploits associated with it.  Additionally, ANYTHING You have running on the PC, IE7, FF3, MS Office, Media Player, favorite software... all have vulnerabilities.

If you do not keep your machine patched or up to date, you leave the door open a crack and your are considered "vulnerable".

If your computer is randomly found having "real" IP connectivity to the WWW (no router or firewall) hackers can try programs that will check to see if you are missing any patches, or if they can compromise any of the other software you have running.  Once they find a hole, they can use other programs to exploit that tool and take over that computer.

One important thing is the fact that you should completely update the Operating System and ALL of the patches.  If your machine is patched for the vulnerability on the HD, then YOU cannot get infected.  It is the more proactive approach (patching your machine, keeping your software updated, using the most current firmware and drivers).  AV is ALWAYS reactive!